"wolfc" wrote:
As for the order: at one point we must have a full set of meta data attached for use in the SecurityDeployer & WebServices.
Either we do parse & scan = complete or scan & parse = complete. Since xml overrides annotations my vote is for: scan then parse.
It's not really as such in EJB 3. We got instance level annotations. It took me a while to realize this. We instantiate a class container per ejb and add annotations to it. Then at the next stage we don't get the annotations from the class, but resolve the annotations from class container.
This works as long as it only affects the ejb bean class. It doesn't work for interceptor classes. So either I've to abandon this model or add extra annotations for instance metadata related to other classes.
You should be able to do instance overrides to any class.
Fundamentally, these need to be coming from the profile service.